Individual skill
skill-security-auditor
Security audit and vulnerability scanning for AI agent skills before install. Detects prompt injection, dangerous code, exfiltration, credential harvesting, and supply chain risks. Use when evaluating untrusted skills or gating installs.
engineering/skill-security-auditor/SKILL.md
Source commit 25bf86b89c6c1e63f433a5b65e8cfcb6cf0b7ad3
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- Yes
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Network or broad shell
- Last checked
- Nov 10, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 1,084
- Repository last updated
- Nov 8, 2026
- License
- NOASSERTION
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- ai-agents Repository topic
- ai-skills Repository topic
- claude-code Repository topic
- developer-tools Repository topic
- agentic-coding Repository topic
- cursor Repository topic
- github-copilot Repository topic
- compliance-automation Repository topic
- claude-skills Repository topic
- gemini-cli Repository topic
- skill-security Declared skill tag
- prompt-injection Declared skill tag
- supply-chain Declared skill tag
- code-scanning Declared skill tag
- ai-security Declared skill tag
- security Derived category
- operations Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 9,799 bytesSKILL.mdcore · 9,799 bytesSKILL.mdcore · 9,799 bytesassets/sample_benign_skill/INSTRUCTIONS.mddoc · 258 bytesassets/sample_benign_skill/formatter.pyruns · 846 bytesassets/sample_benign_skill/requirements.txtdoc · 14 bytesassets/sample_malicious_skill/INSTRUCTIONS.mddoc · 355 bytesassets/sample_malicious_skill/helper.pyruns · 441 bytesassets/sample_malicious_skill/package.jsonruns · 124 bytesassets/sample_malicious_skill/requirements.txtdoc · 29 bytesreferences/audit-output-and-workflow.mddoc · 4,662 bytesreferences/quality-and-best-practices.mddoc · 4,556 bytesreferences/threat-model-and-patterns.mddoc · 6,680 bytesscripts/code_scanner.pyruns · 15,492 bytesscripts/prompt_injection_scanner.pyruns · 17,902 bytesscripts/supply_chain_checker.pyruns · 16,144 bytes
No licensed excerpt is available. You can inspect the pinned source.